CVE-2024-53850
The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
Résumé
The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Addressing GLPI plugin enables you to create IP reports for visualize IP addresses used and free on a given network.. Starting with 3.0.0 and before 3.0.3, a poor security check allows an unauthenticated attacker to determine whether data exists (by name) in GLPI.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com